Function delete_account

api/api.py:149–230

Permanently deletes the authenticated user's account. This will: 1. Cancel any active Stripe subscription 2. Delete all marketplace agents created by the user 3. Delete the Auth0 user account This action is irreversible.

(current_user: AuthUser)

@app.delete("/delete-account", summary="Permanently delete user account")
async def delete_account(current_user: AuthUser):
    """
    Permanently deletes the authenticated user's account.
    This will:
    1. Cancel any active Stripe subscription
    2. Delete all marketplace agents created by the user
    3. Delete the Auth0 user account

    This action is irreversible.
    """
    user_id = current_user.id
    logger.info(f"Account deletion requested for user: {user_id}")

    # 1. Cancel Stripe subscription if exists
    stripe_customer_id = None
    if hasattr(current_user, 'app_metadata') and isinstance(current_user.app_metadata, dict):
        stripe_customer_id = current_user.app_metadata.get("stripe_customer_id")

    email = (getattr(current_user, 'email', None) or '').lower()
    if email:
        email_hash = hashlib.sha256(email.encode()).hexdigest()
        ghost_email = f"{email_hash}@deleted.invalid"
        try:
            all_customers = stripe.Customer.list(email=email, limit=100)
            for cust in all_customers.data:
                # Cancel active subscriptions
                subscriptions = stripe.Subscription.list(customer=cust.id, status='all', limit=100)
                for sub in subscriptions.data:
                    if sub.status in ('active', 'trialing'):
                        stripe.Subscription.cancel(sub.id)
                        logger.info(f"Cancelled Stripe subscription {sub.id} for user {user_id}")

                # Detach all payment methods
                payment_methods = stripe.PaymentMethod.list(customer=cust.id, type="card")
                for pm in payment_methods.data:
                    stripe.PaymentMethod.detach(pm.id)

                # Replace email with hash, wipe all other PII
                stripe.Customer.modify(
                    cust.id,
                    email=ghost_email,
                    name="",
                    phone="",
                    address={},
                    metadata={"deleted": "true"}
                )
                logger.info(f"Redacted Stripe customer {cust.id} for user {user_id}")
        except Exception as e:
            logger.error(f"Failed to process Stripe data for user {user_id}: {e}")
            # Continue with deletion even if Stripe fails
    elif stripe_customer_id:
        # Fallback: no email available, cancel by customer ID only
        try:
            subscriptions = stripe.Subscription.list(customer=stripe_customer_id, status='all', limit=100)
            for sub in subscriptions.data:
                if sub.status in ('active', 'trialing'):
                    stripe.Subscription.cancel(sub.id)
                    logger.info(f"Cancelled Stripe subscription {sub.id} for user {user_id}")